[From nobody Fri Jun 19 18:55:07 2026 Received: (at 1137525-close) by bugs.debian.org; 19 Jun 2026 17:53:26 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 89; hammy, 150; neutral, 181; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:46470) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wadPC-007LaO-0M for 1137525-close@bugs.debian.org; Fri, 19 Jun 2026 17:53:26 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wadPA-004bXI-2d for 1137525-close@bugs.debian.org; Fri, 19 Jun 2026 17:53:24 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=el78dsYv+z7XkcJ6kOo3pXeP9nTa21HJYLn32/FdM8Y=; b=rtikDee6YLk2i3QrqR3O5ITk1V 0Yk6T0H0Fep2DdA52PBHKbf6FnlaSep4mBoLDIpyQLUxIT1MeTqBatM2tmenBPOIE5/wlxVfCqNtH DTY2pqiq9DrQ2+aMTHkg5j7Tr6UTw/w38KL+o7DUu9zMjsEFDjTOsKwu0M52qlpoe2uSW94m20Qbl zS3z/NzokAsSIxxgZBYR2sacncOA1E4d5DJPhFtXLRs1My546dsdSKhoa0dk/BtGtYG4fnqIKLrde lm5b9HFlRfRub89nOEL+VlV2m1JMwTYYilTxgh9AKxaPi1QBh5XwFu6Lnd6xZzijMDyhaTY3LKASG M8yEGL+Q==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wadP9-0000000DceI-3dwU; Fri, 19 Jun 2026 17:53:23 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Sergei Golovan <sgolovan@debian.org> To: 1137525-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: erlang-cowboy Debian: DAK Debian-Changes: erlang-cowboy_2.16.1+dfsg-1_source.changes Debian-Source: erlang-cowboy Debian-Version: 2.16.1+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137525: fixed in erlang-cowboy 2.16.1+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8140553691694980397==" Message-Id: <E1wadP9-0000000DceI-3dwU@fasolo.debian.org> Date: Fri, 19 Jun 2026 17:53:23 +0000 --===============8140553691694980397== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: erlang-cowboy Source-Version: 2.16.1+dfsg-1 Done: Sergei Golovan <sgolovan@debian.org> We believe that the bug you reported is fixed in the latest version of erlang-cowboy, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137525@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <sgolovan@debian.org> (supplier of updated erlang-cowboy packa= ge) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 19 Jun 2026 20:23:30 +0300 Source: erlang-cowboy Architecture: source Version: 2.16.1+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Erlang Packagers <pkg-erlang-devel@lists.alioth.debian.org> Changed-By: Sergei Golovan <sgolovan@debian.org> Closes: 1137525 Changes: erlang-cowboy (2.16.1+dfsg-1) unstable; urgency=3Dmedium . * Team upload. * New upstream release. - Fix for CVE-2026-8466: Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy application (closes: #1137525). - Remove no longer necessary patches. - Switch to make from rebar for building the package. * Update debian/control. - Bump Standards-Version to 4.7.4. - Update debhelper compatibility level to 13. - Update dependencies on erlang-cowlib and erlang-ranch. * Update debian/copyright. - Drop no longer present files from the excluded files list. * Update debian/watch. - Bump version to 4. - Use +dfsg suffix. Checksums-Sha1: c4606b6e7e4c013bc62add255b378128042ee0b7 2421 erlang-cowboy_2.16.1+dfsg-1.dsc 9f04b7a57113c88cbf4972f3156e98cf69d27f94 2044468 erlang-cowboy_2.16.1+dfsg.o= rig.tar.xz 516a568ac38a1135918f1a47e889073e6744f435 3980 erlang-cowboy_2.16.1+dfsg-1.de= bian.tar.xz 2038b6c471e17e2f030699ed8537dcd60a3493f4 18944 erlang-cowboy_2.16.1+dfsg-1_a= md64.buildinfo Checksums-Sha256: 0cbaaf4df66b1ed5f29efc9ccf52944566e18574075a9ebe07e77e152426c0d9 2421 erlang= -cowboy_2.16.1+dfsg-1.dsc 8315d7d39cdf93e90cc89c4a227b4dee8a783e02e6e632082401e1adb719feb3 2044468 erl= ang-cowboy_2.16.1+dfsg.orig.tar.xz 0befebde941cca988d6f7a68f5616d46f88388013363e2427acf8748e9fbb024 3980 erlang= -cowboy_2.16.1+dfsg-1.debian.tar.xz 9e2cf210d2cb7f6beed3daba28088c69b7e8b863e4336b2b26d15b0b97f6c695 18944 erlan= g-cowboy_2.16.1+dfsg-1_amd64.buildinfo Files: d97601efe784a3c86c164b6c8f301e57 2421 devel optional erlang-cowboy_2.16.1+df= sg-1.dsc dfe58817524262e1989df54436ad7b62 2044468 devel optional erlang-cowboy_2.16.1= +dfsg.orig.tar.xz f5e64e11a7107ef59f500c2f95519d31 3980 devel optional erlang-cowboy_2.16.1+df= sg-1.debian.tar.xz 19c3fb2f910c35c88e817e2577991d92 18944 devel optional erlang-cowboy_2.16.1+d= fsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/SYPsyDB+ShSnvc4Tyrk60tj54cFAmo1e7EACgkQTyrk60tj 54eHKhAA0vTonZn60u49oiTk3AJgPMk//o/MjHIESm7qgZ5ar1uZgjNkDLDsI/fw HczUoJqyHGNHnozoHZPsjcJUtFiPdZq0fkY0at0uRVtKxu/DjNb063u6h8Fa47Oo iR6vbFIikfjjSUW1UmwwDiEFi0lxjKNldazurJUOGhQk/YXlc6PxQiv0ySPkE+mb EsZHp3UINvV98IjW7lEWqhZWkBp4N8W3kbcJOVinFDg6XKrB/Oho2yTgN6zS49Ti n9xYAmA47P8QbaZo6tf8JRMB7g0YHgtl6QMKsLhj2Ey3rVxZgfEJr1rQ58vyJaZr Sn7PqefZr18L/f31lBn9LuUssbQfiphET6emor7w/Cw+Gzk69b0+efKkl8Hu6J0Z 7nl6XavwSal2T9u+L5ad26SiSzjTLcUSneXHOQFuFNy0vOUSQfE1NuP4OFEOJNF7 Qgk5lWgKDrqU4rcN1kfy4Ykz++yF9Eqi4pZiq9aEQcUmaIaNww1hciqZQ/FUN4QK Lc6WJfdVrdtl+mmckAWuq1bx/m29BcK3cpyuhqAD5YlSn1Df3+7z9ogs+gGu9lSn r0cuxcZny8e83xya+bVaGGZDdHnjJKWzNr0ts8LzyR8u6xNCwPWlfJ3FeQnu64E7 IqZHqYHLjSxb9mhoXWHw5w3+WDH6Oq1zQnwqyLKcENRWPgSUrCQ=3D =3D1SJN -----END PGP SIGNATURE----- --===============8140553691694980397== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajWCEwAKCRCb9qggYcy5 IVy+AP4gLhyL8jLuo8mOpsU66TFnmo29U+OwZb+B+oF2JMwy7wEA97mqJE7OmGtx rgOMXskQp7zcTy5GYv90hkckGeiUwww= =LUNH -----END PGP SIGNATURE----- --===============8140553691694980397==-- ]